AWS eks high security documentation change
Summary
Added Kubernetes 1.33 platform version details with admission controllers and updated multiple platform versions with security fixes
Security assessment
Explicit mention of 'security fixes' in platform version release notes (e.g., 1.32.5, 1.31.9, etc.) indicates resolution of security vulnerabilities. The addition of Kubernetes 1.33 with PodSecurity admission controller and other security-related controllers (CertificateApproval, CertificateSigning) documents security features. Security fixes directly address vulnerabilities (high severity), while admission controllers represent security controls (documentation addition).
Diff
diff --git a/eks/latest/userguide/platform-versions.md b/eks/latest/userguide/platform-versions.md index ea11d23d9..ff77040fe 100644 --- a//eks/latest/userguide/platform-versions.md +++ b//eks/latest/userguide/platform-versions.md @@ -5 +5 @@ -Kubernetes version 1.32Kubernetes version 1.31Kubernetes version 1.30Kubernetes version 1.29Kubernetes version 1.28Kubernetes version 1.27Kubernetes version 1.26Get current platform versionChange platform version +Kubernetes version 1.33Kubernetes version 1.32Kubernetes version 1.31Kubernetes version 1.30Kubernetes version 1.29Kubernetes version 1.28Kubernetes version 1.27Kubernetes version 1.26Get current platform versionChange platform version @@ -44,0 +45,8 @@ To receive notifications of all source file changes to this specific documentati +## Kubernetes version `1.33` + +The following admission controllers are enabled for all `1.33` platform versions: `NodeRestriction`, `ExtendedResourceToleration`, `NamespaceLifecycle`, `LimitRanger`, `ServiceAccount`, `TaintNodesByCondition`, `PodSecurity`, `Priority`, `DefaultTolerationSeconds`, `DefaultStorageClass`, `StorageObjectInUseProtection`, `PersistentVolumeClaimResize`, `RuntimeClass`, `CertificateApproval`, `CertificateSigning`, `CertificateSubjectRestriction`, `DefaultIngressClass`, `MutatingAdmissionWebhook`, `ValidatingAdmissionWebhook`, `ResourceQuota`. + +Kubernetes version | EKS platform version | Release notes | Release date +---|---|---|--- +`1.33.1` | `eks.4` | Initial release of Kubernetes version `1.33` for EKS. For more information, see [Kubernetes 1.33](./kubernetes-versions-standard.html#kubernetes-1-33). | May 28, 2025 + @@ -50,0 +59 @@ Kubernetes version | EKS platform version | Release notes | Release date +`1.32.5` | `eks.11` | New platform version with security fixes and enhancements. | May 30, 2025 @@ -66,0 +76 @@ Kubernetes version | EKS platform version | Release notes | Release date +`1.31.9` | `eks.27` | New platform version with security fixes and enhancements. | May 30, 2025 @@ -86,0 +97 @@ Kubernetes version | EKS platform version | Release notes | Release date +`1.30.13` | `eks.35` | New platform version with security fixes and enhancements. | May 30, 2025 @@ -113,0 +125 @@ Kubernetes version | EKS platform version | Release notes | Release date +`1.29.15` | `eks.38` | New platform version with security fixes and enhancements. | May 30, 2025 @@ -146,0 +159 @@ Kubernetes version | EKS platform version | Release notes | Release date +`1.28.15` | `eks.44` | New platform version with security fixes and enhancements. | May 30. 2025 @@ -184,0 +198 @@ Kubernetes version | EKS platform version | Release notes | Release date +`1.27.16` | `eks.48` | New platform version with security fixes and enhancements. | May 30, 2025 @@ -226,0 +241 @@ Kubernetes version | EKS platform version | Release notes | Release date +`1.26.15` | `eks.50` | New platform version with security fixes and enhancements. | May 30, 2025